
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/FA272BC67EBE11EEABD00B4DC4F9AE02.roa
File: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (raw, json)
Hash identifier: x3N43LNHpCNmmbJ4oepJrzKxjOa5Xqqq2QK4fNAveZY=
Subject key identifier: 1F:34:5E:60:A5:3C:BA:4F:25:62:D6:C9:6B:75:80:FA:52:7C:83:2E
Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial: 022A
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/FA272BC67EBE11EEABD00B4DC4F9AE02.roa
Signing time: Mon 31 Aug 2026 03:52:07 +0000
ROA not before: Mon 31 Aug 2026 03:52:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151802
IP address blocks: 103.226.26.0/24 maxlen: 24
103.226.27.0/24 maxlen: 24
2401:ce0:a100::/40 maxlen: 40
2401:ce0:a200::/40 maxlen: 40
2401:ce0:aa00::/40 maxlen: 40
2401:ce0:ab00::/40 maxlen: 40
2401:ce0:beef::/48 maxlen: 48
2401:ce0:face::/48 maxlen: 48
2401:ce0:fade::/48 maxlen: 48
2401:ce0:faee::/48 maxlen: 48
2401:ce0:fafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Validity
Not Before: Aug 31 03:52:07 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94fa67-b47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:98:86:dc:cc:9a:13:2d:3a:04:25:7c:ac:
b7:6a:30:d0:45:39:1f:ba:a5:34:3d:76:64:a3:52:
09:fe:d9:6d:6e:8e:b3:4c:40:0f:5a:27:4d:62:38:
35:52:26:34:79:0a:86:77:48:97:69:b8:95:ec:3c:
28:b4:3d:0a:21:41:28:62:6a:e7:de:a6:24:9e:d7:
81:d5:cf:25:97:ce:b2:a7:e7:ca:84:67:ca:54:80:
7f:4d:0b:30:8c:10:3e:a6:c8:73:13:89:44:3e:82:
53:32:2b:1e:a9:20:ac:86:52:aa:bd:18:46:17:7b:
f1:19:f5:a9:e1:3d:4b:b6:ba:d0:93:71:cd:f1:f3:
0b:ad:c7:4e:4d:44:d0:7e:b8:f0:89:7b:23:24:b1:
4b:31:09:41:4b:ca:85:fd:6f:e8:4d:af:eb:a8:88:
54:8c:ed:a7:83:ab:71:07:01:27:0d:46:c2:87:2d:
9f:b7:a2:94:c0:ee:88:44:8b:50:16:53:4f:f1:26:
cd:0c:40:d2:1d:9a:5f:e9:4b:28:ff:10:88:a1:30:
4f:e1:5d:01:08:58:f8:a6:30:c0:c8:8f:c1:85:76:
c7:46:8a:c1:e9:40:c5:f5:c5:9a:08:81:5a:06:5e:
d9:a3:a3:5a:a9:86:da:89:15:11:4b:e3:4f:d5:30:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:5E:60:A5:3C:BA:4F:25:62:D6:C9:6B:75:80:FA:52:7C:83:2E
X509v3 Authority Key Identifier:
keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/FA272BC67EBE11EEABD00B4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.226.26.0/23
IPv6:
2401:ce0:a100::-2401:ce0:a2ff:ffff:ffff:ffff:ffff:ffff
2401:ce0:aa00::/39
2401:ce0:beef::/48
2401:ce0:face::/48
2401:ce0:fade::/48
2401:ce0:faee::/48
2401:ce0:fafe::/48
Signature Algorithm: sha256WithRSAEncryption
b0:74:77:e7:f4:7b:2f:6f:e9:af:d9:25:ae:1e:25:20:73:5a:
3b:af:bf:c5:58:85:2a:fc:e7:76:7d:b9:30:29:f4:8c:26:55:
12:b2:5e:9e:4e:89:91:db:86:0e:62:8d:b3:20:d2:2a:f9:22:
de:aa:aa:98:14:a9:cd:c6:85:e9:56:4b:85:29:cc:80:fd:47:
84:0e:8a:ea:b6:f2:b9:09:33:d3:c1:01:ba:cd:29:7e:d1:ba:
6c:fb:e7:8f:b8:43:03:c4:7d:b6:91:d6:22:38:dc:43:b1:80:
e7:89:8f:0c:96:3a:65:31:fd:2f:24:b2:c0:70:57:1e:01:d5:
fe:70:ae:85:15:28:1a:ad:24:de:8d:7a:a3:f7:5d:67:df:71:
4b:0d:91:62:62:78:63:ff:4f:ed:4d:7b:25:7f:02:d8:09:2a:
16:fe:eb:10:bd:b5:54:be:db:ff:60:28:7d:bc:b0:92:51:00:
56:32:c8:1f:c2:a4:08:3c:e5:dc:c9:cc:44:ad:fe:63:a3:25:
34:87:9c:7e:38:e2:7f:0b:85:d5:83:3b:e2:0c:f2:fc:49:f6:
03:61:e6:0e:fc:10:9e:5e:0d:8a:ec:43:e1:ed:3f:c9:8b:ee:
5a:21:07:f5:ab:4a:4b:14:00:9e:71:cd:2e:37:41:60:20:28:
51:56:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:42:13 2026 by rpki-client